diff options
| author | delphij <delphij@FreeBSD.org> | 2015-04-08 07:48:04 +0800 |
|---|---|---|
| committer | delphij <delphij@FreeBSD.org> | 2015-04-08 07:48:04 +0800 |
| commit | 5dc712058653b28e93e258eae52de87ab2857201 (patch) | |
| tree | 44cf696d358d04234b9ed8761374579d41587213 /security | |
| parent | ce1aded899444883d42a5002b8491a9b71954c05 (diff) | |
| download | freebsd-ports-gnome-5dc712058653b28e93e258eae52de87ab2857201.tar.gz freebsd-ports-gnome-5dc712058653b28e93e258eae52de87ab2857201.tar.zst freebsd-ports-gnome-5dc712058653b28e93e258eae52de87ab2857201.zip | |
Document NTP multiple vulnerabilities.
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 36 |
1 files changed, 36 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index f92f5a278fb0..8ba3b020f632 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -57,6 +57,42 @@ Notes: --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="ebd84c96-dd7e-11e4-854e-3c970e169bc2"> + <topic>ntp -- multiple vulnerabilities</topic> + <affects> + <package> + <name>ntp</name> + <range><lt>4.2.8p2</lt></range> + </package> + <package> + <name>ntp-devel</name> + <range><lt>4.3.14</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>ntp.org reports:</p> + <blockquote cite="http://archive.ntp.org/ntp4/ChangeLog-stable"> + <ul> + <li>[Sec 2779] ntpd accepts unauthenticated packets + with symmetric key crypto.</li> + <li>[Sec 2781] Authentication doesn't protect symmetric + associations against DoS attacks.</li> + </ul> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2015-1798</cvename> + <cvename>CVE-2015-1799</cvename> + <url>http://archive.ntp.org/ntp4/ChangeLog-stable</url> + </references> + <dates> + <discovery>2015-04-07</discovery> + <entry>2015-04-07</entry> + </dates> + </vuln> + <vuln vid="b8321d76-24e7-4b72-a01d-d12c4445d826"> <topic>mozilla -- multiple vulnerabilities</topic> <affects> |